Actually, there are multiple instances one can use to whitleblow.
Any company above 50 employees should host such an instance as well.
Therefore you can chose where to whistleblow.
After whistleblowing you get an acknowledgement within seven days. After three months they have to report back what actions have been started about the topic.
The instances of the state have to additionally share all recieved tips to the public annually.
There is another instance for the EU hosted.
The exact national law may differ within EU countries. And I am not a law expert as well.
Anyhow you therefore have a channel to report any authority.
Actually, there are multiple instances one can use to whitleblow. Any company above 50 employees should host such an instance as well. Therefore you can chose where to whistleblow.
After whistleblowing you get an acknowledgement within seven days. After three months they have to report back what actions have been started about the topic.
The instances of the state have to additionally share all recieved tips to the public annually. There is another instance for the EU hosted.
The exact national law may differ within EU countries. And I am not a law expert as well.
Anyhow you therefore have a channel to report any authority.